Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.

Restaurant operator – Fine (Germany, 2022)

Fine
Bundesbeauftragter für den Datenschutz1 January 2022Germany
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Another restaurant operator in Germany was found to have misused customer data during the pandemic but faced no fine. The operator collected personal information for contact tracing but used it to send promotional messages. This case highlights the importance of using customer data only for its intended purpose.

What happened

A restaurant operator was investigated for using contact tracing data to send promotional messages.

Who was affected

Restaurant visitors whose personal data was collected for contact tracing.

What the authority found

The authority found that the restaurant unlawfully used the data for marketing, but no fine was imposed.

Why this matters

This case serves as a reminder for businesses to respect the intended purpose of collected data. Companies should be cautious about how they use personal information to avoid potential legal issues.

Recorded legal citations
Automatically processed
Art. 5 GDPR
Art. 6 GDPR
View original scraped data
Art. 5(GDPR)
Art. 6(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 19 March 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The DPA of Berlin has imposed a fine on a restaurant operator. During the Corona pandemic, the operator had required restaurant visitors to fill out forms with their personal data for the purpose of contact tracing as required by law. However, the controller unlawfully used the data to send promotional messages to the data subjects.

Details

Fine Date

1 January 2022

Authority

Bundesbeauftragter für den Datenschutz

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Restaurant operator - Germany (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: